Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
File:                     5A2848029237EDE072BF0D27156F239E1FEBEF52.cer (raw, json)
Hash identifier:          Y/zsRdhpozVRchPx8KlhN6opLo7qobEllyUs2C2gM/g=
Subject key identifier:   5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45128EBEC2FFAE5DDF47FA382A5A3668B9903FD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Apr 2025 13:08:50 +0000
Certificate not after:    Sat 11 Apr 2026 13:13:50 +0000
Subordinate resources:    AS: 61831
                          IP: 201.140.252.0/22
                          IP: 2804:1a00::/32
Validation:               Failed, certificate revoked on Thu 17 Apr 2025 13:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:12:8e:be:c2:ff:ae:5d:df:47:fa:38:2a:5a:36:68:b9:90:3f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 12 13:08:50 2025 GMT
            Not After : Apr 11 13:13:50 2026 GMT
        Subject: CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:24:98:30:24:7a:f4:d4:0f:6d:c1:1c:54:
                    69:b1:3a:ae:47:b9:d8:49:ea:76:0c:7a:3a:63:4d:
                    34:e7:a5:c8:ad:5d:f2:fd:f9:c4:d0:c4:4d:f3:3a:
                    cb:35:24:47:f0:86:4f:2a:82:fb:af:f7:a3:e7:2d:
                    f9:4a:73:cb:12:ab:fb:d7:b4:b0:7b:30:37:8f:24:
                    9f:16:26:40:9d:97:1f:11:33:f0:ae:fb:d2:11:95:
                    90:72:82:93:34:93:17:12:c0:f8:39:e8:c0:43:22:
                    b3:55:9e:70:7a:b0:bc:67:51:29:ec:27:40:a8:1e:
                    53:12:0b:89:63:59:bf:4c:71:1a:f7:5e:90:5e:bc:
                    3f:12:4f:71:81:6d:9e:8f:88:2a:da:5c:d5:3f:df:
                    a6:aa:a0:ed:e9:04:47:89:4e:70:99:42:60:41:c3:
                    fa:ef:13:6e:61:c5:af:be:48:69:39:dd:a7:5f:40:
                    84:c2:bd:4e:c0:96:c4:1c:67:89:d0:76:6d:96:b4:
                    09:b4:c2:38:77:5a:e5:77:a7:e9:29:e2:ec:d2:ae:
                    03:4d:55:2e:d3:38:7f:b6:a1:70:f8:c8:71:57:f2:
                    eb:e5:74:11:aa:95:e0:01:21:0b:8b:e8:62:eb:82:
                    35:e4:af:e2:18:d2:dd:08:32:ba:8f:f5:aa:65:a9:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.252.0/22
                IPv6:
                  2804:1a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61831

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:2b:61:d0:a7:f7:f2:8c:0b:89:9a:ad:03:18:83:47:b0:
         3c:8c:b8:f1:c8:34:90:a1:ad:bb:2b:41:a4:37:b4:ca:25:21:
         f8:f0:00:3d:f3:18:26:da:46:fe:28:1b:57:78:f6:8f:53:2a:
         8f:32:b9:63:bd:1c:cf:78:29:ad:a9:47:06:1e:4d:e7:32:6d:
         9e:6a:8b:d3:ee:ae:9c:b9:dc:32:63:4c:e4:88:ec:2e:9f:f8:
         90:d1:59:af:5f:9f:06:74:bb:0f:23:28:b3:d5:68:9b:bb:e0:
         e3:38:2e:6e:92:4b:27:74:1b:ed:0e:31:de:c9:a3:c5:10:4c:
         94:b0:99:f4:db:e4:48:b8:a3:ca:2c:08:e3:40:5d:70:a8:5a:
         d9:05:77:85:36:a3:42:c7:ee:91:20:0f:8b:a7:46:02:c9:86:
         7c:13:1e:59:2b:e1:01:52:d4:a8:b8:23:3b:05:1f:57:55:2c:
         f7:ef:9e:9b:eb:95:5e:26:74:94:42:a6:73:66:b8:49:09:13:
         e3:3b:8e:6f:5c:8a:f9:8a:e1:5c:50:d9:99:55:ab:94:dc:70:
         66:04:18:ea:88:ca:00:89:90:3a:c8:40:1c:41:7c:f4:ed:dd:
         50:74:95:e8:e9:16:e4:30:30:a5:08:d5:fe:48:50:c6:1c:5d:
         c5:62:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:45:35 2025 by rpki-client